An Evaluation of the Security of the Bitcoin Peer-To-Peer Network
An Evaluation of the Security of the Bitcoin Peer-To-Peer Network
复制标题
比特币点对点网络的安全性评估
DOI：
10.1109/cybermatics_2018.2018.00195
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
K. Markantonakis
中科院分区：
文献类型：
--
作者：
James Tapsell;Raja Naeem Akram;K. Markantonakis
支持比特币运行的是点对点 (P2P) 网络 [1]，它促进最终用户执行交易以及称为比特币挖矿的交易确认过程。该 P2P 网络的安全性对于货币的运行至关重要，底层网络的颠覆可能导致对比特币用户的攻击，包括盗窃比特币、操纵挖矿过程和拒绝服务 (DoS)。作为本文的一部分，我们对网络协议和比特币核心软件进行了分析，发现三种比特币消息交换（连接握手、GETHEADERS/HEADERS 和 MEMPOOL/INV）可能容易受到欺骗并用于分布式拒绝服务 (DDoS) 攻击。评估针对已识别的弱点和漏洞的可能解决方案，例如在网络消息交换中引入随机数。
Underpinning the operation of Bitcoin is a peer-to-peer (P2P) network [1] that facilitates the execution of transactions by end users, as well as the transaction confirmation process known as bitcoin mining. The security of this P2P network is vital for the currency to function and subversion of the underlying network can lead to attacks on bitcoin users including theft of bitcoins, manipulation of the mining process and denial of service (DoS). As part of this paper the network protocol and bitcoin core software are analysed, with three bitcoin message exchanges (the connection handshake, GETHEADERS/HEADERS and MEMPOOL/INV) found to be potentially vulnerable to spoofing and use in distributed denial of service (DDoS) attacks. Possible solutions to the identified weaknesses and vulnerabilities are evaluated, such as the introduction of random nonces into network messages exchanges.